Oracle Corporation Affected

Notified:  April 12, 2006 Updated: May 03, 2006

Status

Affected

Vendor Statement

We have fixed the vulnerability in our current code line as outlined here in our published "Security Vulnerability Fixing Policy and Process": http://www.oracle.com/technology/deploy/security/securityfixlifecycle.html When we have patches available for all affected versions and platforms, we will schedule the fix to appear in a Critical Patch Update.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.